Back

CVE-2004-1900

Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands.

Published: Dec 31, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (4)

Vendor Product Version
pan_vision i.g.i-2_covert_strike 1.0
pan_vision i.g.i-2_covert_strike 1.1
pan_vision i.g.i-2_covert_strike 1.2
pan_vision i.g.i-2_covert_strike 1.3

GitHub Security Advisory GHSA-g3r8-r8px-gp93

Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 3.82%

Top 11% most likely to be exploited

Threat Score 31.1 / 100

Data Sources

NVD EPSS GitHub